No NOD32 updates...

Two days and no nod32 updates...what´s going on? Is Eset making a new big update?

 

Maybe they did real good against KAV this time and don`t think they need to update everyday.

 

Eset doesn't seem to update on weekends normally.

 

Relax. Im sure Cool Daddy has it all under control.

 

There was a new virus outbreak(ZOTOB.A) on Sunday. I am surprised Eset didn't update their AV to detect this worm.

http://news.yahoo.com/s/nm/singapore_virus_dc



tECHNODROME

 

yep - I'm sure Eset are working on updates to cover zotob...

I got information similar to that Yahoo! article from CNN at least 3 hours before the Yahoo! publication, and I'm sure that threatsense or some such method made Eset aware of it before either of the articles:

http://www.nod32usa.com/nod32-and-v...4-Windows-targeted-by-new-virus.html#extended

 

This worm was discovered yesterday.




tECHNODROME

 

If you got patched by Microsoft last week, you should be safe.

 

I know. I was talking about an article about the worm. I'm not even a virus researcher, or a company involved in writing AV solutions... the point being if the news of it reaches those of us only marginally connected with the industry in a timely manner, those working full time on AV solutions (Eset, Symantec, Trend - etc.) are generally going to know well before the news hits the papers/news websites etc.

regards

Greg

 

just updated to 1.1194

 

me too... although the update information I found is potentially incomplete... or zotob threat is going under a different name...

http://www.nod32usa.com/nod32-updates/updates/989.html

 

Now I Got the Update...1.1194
The update info at eset site is a little bit incomplete...1.1192

 

.com are usually a bit slower to update than .ch (http://www.nod32.ch/en/news/update.php)

 

Thanks brian N...
I think Eset did not add a signature against Zotob...

 

As far as I know, it was the new Mytob variants added to the latest update and both had been detected generically as Mytob variants before the signatures were added.

 

A search on this site http://www.nod32usa.com/nod32-updates/ does not show ZOTOB as being part of the virus definitions as to date.

 

Zotob is detected by NOD32 as Mytob.something

 

They could be using different names, or variants.
We'll see in the next few days what they add.

Also Marcos talks about mytob, but I think he means zotop are a variant of mytob in some way.. Not really sure, but the latest mytob update is from 2005.08.15 (latest update) http://ip2.users.whitehat.dk/view.php?id=991&highlight=Mytob

 

http://www.eset.com/msgs/mytobiq.htm

and

http://www.eset.com/msgs/mytobir.htm

 

Daddy knows .. He knows

 

Of course i know that when i analyse these worms

 

Lier
I even made you a birthday pircture, I know youre in the Eset special forces

 

One of our clients just got hit with one of the worms utilizing that PnP exploit...and their servers (both 2K and 2K3)just got hit yesterday but the variant "W32.Esbot.A"...we switched over their near 90 node LAN from Symantec CE to NOD32 EE a few weeks ago, a straggling machine using Symantec CE which wasn't flipped over yet detected it, NOD didn't. That was embarassing.

 

Just as I typed above, an update rolled in..1.1195...lets see what it has inside.

 

the aliases make this too difficult... ...can someone confirm that nod32 protects against this threat please: http://vil.nai.com/vil/content/v_135491.htm

thanks, lee